OPNsense pros and cons

The IDS and IPS features are valuable. From the usability perspective, there is a lot of good documentation. As IT professionals, we found it very easy to configure the firewall. It was easy to configure and use.

The most valuable features are reporting, the Sensei plugin, and firewall capabilities.

The VPN server feature is the most valuable. It is integrated with Radius and AAA for doing accounting and authentication. Insight view is also an important feature for me at this time. It allows me to assess our network traffic. I also like the firewall feature. The BSD kernel has a packet filter. It is one of the most solid frameworks for firewalls. Its user interface is one of the best interfaces I have used.

OPNsense is easy to scale when running on the hardware.

The initial implementation process is simple.

It has an open license. It works very well, and there is an update every month.

We have found pretty much all the features of the solution to be valuable.

OPNsense could improve by making the configuration more web-based rather than shell or command-line-based.

OPNsense is highly stable.

I have found the solution has some great features overall, such as guest access capabilities, dashboards, and ease of use. There is plenty of documentation and support and it has the plugins that I needed.

We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much.

I would like to see better SD-WAN performance.

The only thing that I would like to see improved is the Insight or the NetFlow analysis part. It would be good to have the possibility to dig down on the Insight platform. Right now, we can easily do only a few analyses. If this page becomes more powerful, it surely will be a well-adopted platform.

The interface needs to be simplified. It is not user-friendly.

While they do have paid options that actually gives better features, for most of the clients, if they tend to take a paid option will instead opt for Fortinet.

Its interface should be a little bit better.

The solution could be more secure.

OPNsense could improve by making the configuration more web-based rather than shell or command-line-based.

The support for OPNsense is good because we have documents available on the internet. The support could improve a little.

The logging could improve in OPNsense.